{"ip":"191.240.226.15","observed":true,"total_events":98,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["98 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 20,913 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"20,913 bytes sent","bytes_sent":20913,"session_seconds":0,"persistent":false},"basis":"first_contact"},"first_seen":"2026-10-15T12:58:08","last_seen":"2026-10-15T16:00:18","events_24h":0,"events_7d":98,"interactive_sessions":0,"interactive_sessions_24h":0,"interactive_sessions_7d":0,"interactive_protocols":[],"geo":{"country_code":"BR","country_name":"Brazil","region":"Rio de Janeiro","city":"Nova Friburgo","lat":-22.3355,"lon":-42.4967,"asn":53142,"org":"Friburgo Online LTDA ME"},"source_domain":"ip.191.240.226.15.frionline.com.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as53142","label":"Friburgo Online LTDA ME","category":"isp","url":"https://www.peeringdb.com/asn/53142"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":1,"protocols":[{"protocol":"udp","events":1}],"ports":[{"port":39131,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-15T12:58:04","last_seen":"2026-10-15T12:58:04","recent":[{"timestamp":"2026-10-15T12:58:04","port":39131,"src_port":17042,"proto":"udp","app_proto":"","app_protocol":"bittorrent","summary":"A\u0000\u001f�)dϊ\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000�1\u0000\u0000","payload_hex":"41001fec2964cf8a00000000000000008b310000","sni":"","session":"cd48a7aa-aaa5-4f7a-96eb-85c795c54b56","bytes_in":20,"source_verified":false}]},"interaction":null,"top_ports":[{"port":39131,"proto":"tcp","label":"","count":98}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[],"interactive":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[]}},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-10-15","count":98}],"recent_events":[{"timestamp":"2026-10-15T16:00:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-(AyBVkYPdCTH","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d28417942566b595064435448","method":"","user_agent":"","ja3":"","session":"38c48898-9ab1-4457-88ad-fb28df2d32b1","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"a80a6bddea358191","strings":["BitTorrent protocol","<-UW160N-(AyBVkYPdCTH"]}},{"timestamp":"2026-10-15T15:54:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��\u0018\u0010\u0010���h��\u001fZ\u001a���������\u0017l��������g��?Hi\u0010˷vW@�d���J�\u0000\u000ee�Ç,SZL�\u000f��| (�)�3?�\"�|M�%�*Sh�B\u00006q\f\u001b�����z,XP&����\u001aÒ����|l�k�\u0003\u0014̌\u0012؎!`��!��z�(�0!�n�v-�Ёw4Ljk˾y�\u0012�*�\">�\u00196���\"L\u0012���*���\u001aop���aj\u0017��0��p��r","payload_hex":"8c9e181010bcb6d268ad811f5a1aefdecef8bffae5defc176ca8ae9eb8f4f6dfce67eeff3f486910cbb7765740bb64f28a834ac7000e6596c3872c535a4cdf0feea37c2028e029c2333faf22ab7c4d8925e72a536898420036710c1ba3f3e8c4f97a2c585026cff5f78c1ac392b3eaecc57c6c7fef6b9a0314cc8c12d88e216083f121b7947ae628a63021be6ee8762d86d0817734c7886bcbbe79fd12c02ad9223efd1936b3e9e7224c1288fafa2affdfe37f1a6f708f8a88616a17fda030b09970b5f272","method":"","user_agent":"","ja3":"","session":"94deef0a-df9e-41f3-89a8-07b450849e41","seq":1,"duration_ms":101,"bytes_in":197,"bytes_out":14,"enriched":{"digest":"239399cd857c4522","strings":[",SZL","z,XP&"]}},{"timestamp":"2026-10-15T15:51:51","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-VD*c)K~Qq7ZE","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d56442a63294b7e5171375a45","method":"","user_agent":"","ja3":"","session":"6d65cf3b-69cc-4e60-b4a3-320c074e9504","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"4aa349dd350337ab","strings":["BitTorrent protocol","<-UW160N-VD*c)K~Qq7ZE"]}},{"timestamp":"2026-10-15T15:49:29","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"��|�\u001a|�\u0013�ʙ1\u000b\u000b�J��>�����*6��U\u0011C�A�I��\r�\u0015�� ���t�j��\u0005L�\u001e:F�v'4\u000ePi��걥���jjD\u0007~�c׍�m���W~+�_\u0013G�1\\\u0007�\u000fRH�@�$69\u001e�g�\u00182)�\u0012(\u001d����H(�=\u0018�\u0010\u0005'?��z�:�\\m3\n?�S��d�a������PY\u001b4��\u0015S�\u0004��~\u000fB�>u� �\t\u000f�kMbG�y\f����Ļ�A��Ԝ\u0015�Tj\u00114\u0002��\u0000Z-�-����9��ǹ��I�\u0002swd{r8s�@\u0013���\u00058<�\u0002\u0001\u001a^S�w�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"6ccea24d-328b-4e4c-a95a-7c655acd0beb","seq":1,"duration_ms":100,"bytes_in":253,"bytes_out":14,"enriched":{"digest":"6ddbb953699db856","strings":["kMbG","swd{r8s"]}},{"timestamp":"2026-10-15T15:46:55","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-KmJZp~JyEdUP","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d4b6d4a5a707e4a7945645550","method":"","user_agent":"","ja3":"","session":"5e397b23-b0d1-4329-9679-c59f387dd6f7","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"88e5a00f72cec378","strings":["BitTorrent protocol","<-UW160N-KmJZp~JyEdUP"]}},{"timestamp":"2026-10-15T15:44:37","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"U�+�X �14 �!0\u001e��G��.Y<�W���*�~��%:#�b��;��\b���Ԟ���\u001b45��$�B�S��6,���\u0003fl_�J\u0010���N6\f+N��GF�̔\u001f$�d\u001ds�{�6s�_\u0015�Z��k�\u0015A��U似ٶ�NFNQ�5\u0017�7ٗ�L[\u0019k��L^��[�(��E���<\u001d1`�A���=\u0010�\"��=\u001e���A��o&�V\\\u001eb","payload_hex":"55f62baf5820b5313420fd21301eddce47d2e62e593c7fa457a0acc22acd7ea1eb253a23ec62ed9d3bcbcc08b086bad49eb8fbea1b3435bbe324ab428b53ddfe367f2c92bb9903666c5fc74a108ef5ea4e360c2b4ecee34746afcc941f24b5641d73e77bd43673a25f15ce5aa1f46b901541e5f055e4bcbcd9b6ac4e464e51cf3517f937d997ac4c5b196bb3ef4c5ee0d85b9828c6fd45f0b7873c1d31608341d5decf3d10b72287e73d1eeeea9341faed6f26de565c1e62","method":"","user_agent":"","ja3":"","session":"b85f7821-6406-4275-98a6-7e972c7441ea","seq":1,"duration_ms":100,"bytes_in":184,"bytes_out":14,"enriched":{"digest":"069a9f9d9a14320b","strings":["NFNQ"]}},{"timestamp":"2026-10-15T15:42:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-gEP)!1MknKtB","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d6745502921314d6b6e4b7442","method":"","user_agent":"","ja3":"","session":"050b3e45-6621-4a48-8e78-c7894974f45f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"0c628c7a34829724","strings":["BitTorrent protocol","<-UW160N-gEP)!1MknKtB"]}},{"timestamp":"2026-10-15T15:39:56","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0011 ��}D�t\n��q��a���;�������?0��[\u000e\u0007\f�[����e\u0016X���NG]\fti,���\u000f���\u0006�]�5F�[�ئ\u000f�W����$ӝ����ZXf:\f)BW��'\u000f\b���ۇ���Xk��!*@�p�\u0007��z�+/�LF\u001c\u001e\u001c�?�\\\u0005�����ڞ���w�`��.\u001d��z�2,J�\bq%�Ĺ\u0018MD\ng\u0015��3\u001c���\u0003�B\b$���r����ɸ�\u0011\u000bQ}\t>'�*ṲM�\u0016Dm4��q�3l@���\u0016��(���<3��\u0015��>)A�<�c\r�#a��s\u0014r�ߺgb.���u��I�lQ��\u0011�>�'C���rW�4ϙ*��S��T���H���)I\b�H$��\u000b�u�WȰ\u0019\u0007�\u0000§D'�7�O�����]MH�\ḅ\\��&�N���l.c��&���{��� ~�c�n�f�&xP�Rs�\r2:,�#�3p�̤��\u000b�CVQ�\t�=�(\u0001H�=N�\u001dv�\t�\u0006","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"84090ab7-2acf-4da0-9c81-492e2706e21f","seq":1,"duration_ms":100,"bytes_in":415,"bytes_out":14,"enriched":{"digest":"933ab6bb3a33b3f2","strings":["ZXf:"]}},{"timestamp":"2026-10-15T15:37:24","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-1kpFiLfuU*sG","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d316b7046694c6675552a7347","method":"","user_agent":"","ja3":"","session":"bdd11308-80ab-442f-a174-391ff9df876c","seq":1,"duration_ms":101,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"9a33bbdb11bc9fa2","strings":["BitTorrent protocol","<-UW160N-1kpFiLfuU*sG"]}},{"timestamp":"2026-10-15T15:35:07","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"���)df\f����o|�b6~\u000bkj���>\u0013�\u000b^�.\u001a=W�l��N\f�:�v1�a�\u0014~\u001e��'v�bOS�\u0014\"��F�/���\u001dM\u001f�\b�E��\\���\u0011]+=T�Xm�\u0000907\u00079�B�\r\u0011,���\u00145j))�\u001c��$�/��\b�\u0017V?�K��8�\u00189w�Q\u0012b�.!8iF\u0001\r����5^c��[�7 L��\u0012��܏_0�Pm�8�4%\b�܎\u001b��n�W���@����ϊ��l�:?�","payload_hex":"e583c32964660ca1b087de6f7cba62367e0b6b6af48ecc3e139f0b5e982e1a3d57826c99d54e0cdd3ac776318b61c4147e1ea0c92776d9624f53b1142291bb46ac2fa5f0a01d4d1fa408fa45bdcf5c83e8d1115d2b3d5492586d88003930370739ff42a60d112c87eeb514356a2929ee1cc1cd249f2fc9e208fd17563f8f4b95c43889183977a4511262b22e21386946010d8d89f2a2355e63e5935bba37204cfac5129ed6dc8f5f308050ef9e906d963886342508ebdc8e1bd3d36ef45789a18440a8e7b0f4cf8acfc66cab3a3ffb","method":"","user_agent":"","ja3":"","session":"1c80764a-0a92-4a8f-9777-a58ce21ee42d","seq":1,"duration_ms":100,"bytes_in":207,"bytes_out":14,"enriched":{"digest":"6163ff61f4ed4e65","strings":["]+=T","5j))",".!8iF"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-17T05:26:44.541014+00:00"}